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1020030015192 #^ 2003/12/5 

IPClnternet Protocol) efl °1 ^ ( 1 ayer ) ^1 ^-§-£]^ ^B^la. J±<*H 7 A°l 
3., ^*\}*\<L3.^ IP J±*l ^JLE^H A}-g-£]^ ojrro. (sliding window )o} ^ yj. 

^ ^ #*H1 ^3r^b ^°lcf. -g- ^&H^ ^£4- ^:^ H o V ^^- (a) IP sfl^ ^ 

^71^-^-1- ^HrRrCil A>-g-^^ ^^o]^ ^.£^7} full ^7>* ##<5Kr ^-Tj] ; ^ (b) 
A cM ^H}ol^ ^5L-f7> fullol £|&-g. xtfl, ^ ^2}o]xg ^^ofl <2j£i£jrofl Aj- 7 } 

^o)^ ^no^ 371^* ^71 ^S^o]] ^ ^ ^^Jl* ^A]^ cjTfl 

«- i^W. ^^r, ^S]^ IP <UQ#5.o\) ^^O.S, ^^M^ ^tr_o 

1- #5L-f£] 37l^ SEfe ^Aj^o.^^ ^A]*V IP o^^^m. 

^la^H ^€ ^^M-^, ^r^ltb IP ^171^- icf ^^Tfl IP sfl 

[tfl3L£] 

£. 4 
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^1 

I P ii°HHal ^o}t$ f\s.3-si\ ^Bl« 0 >^ ^ {Sliding window management method 

and apparatus in IPsec} 
[-£^ ^] 

5. l£ IP ^]c-1(AH)^ S.^o)t\-. 

5L 2~r IP "^^H^ M.<$ 5llol S .c( ES p)o 1 injiolc|.. 

£ 3-^ <k^°]^ 7 3^Rr 3# ^^*>7l ^fV S^ojc)-. 

^r^^r IPOnternet Protocol) ell °1 <H ( 1 ayer ) °fl a.o>°ll ^tr 3}°. 

3., ^l^iLS^r IP ^^^oflA^ A>-g-£)^ #EH^ (sliding window)^ # 

v-flH^a. Efl^oflA^ ^^(transaction) iL<?ia§°.5. IPSec( Internet Protocol 
Security)^ SXttV] , °1tt IP 31 IP 4^1 ^ ^tHHI tfltr <L>^# ^l^r?! ^ 

*V ^ 7ll#o.^«-Ei 7^5]^ s.^ cflolE^ofl nflsfl a] ti ] a§ 7fl^tr4. IPsec^r 
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RFC 2402°1] 7}^s\o\ oi- ip 01^ *||i;-|(IP Authentication Header : AH)Sr RFC 2406*1] 
91tt IP 3flol^c (I p Encapsulating Security Payload : ESP)« 

o> £ l£ IP «flci(AH)^ i^o]tf. 

<io> IP oi^lci(AH)^ ^-tltr cflolEi7> *tf r -E- 1^*1 ^(source address )S -t-b] 

^o]7>l- <?1#*>J1, r%o]^$) (integrity)* 3.&Z}7) °1« ^*fl MD5 

*4 SHA-1 <£jiem* A>-g-*lcf. neli ip 2]]^ zfzHl tflsjH JjL^ ^-o]^ Jl) 

AH Sequence Number : SN)(110)1- zH^^ (replay attack)* iMtr 

cf. IP 4^ IP 3°fl AH* f7}fo S ^ o]^o. ^*Vcf. 

<n> £ '2tt IP "?l^#3M*g H<?> 5lMs=(ESP)^ 

<i2> ip «y^#eflol^ ^oj- 3flol^.c (ESP) ^ ip tilB^a^l tfltb Hl^jz}- ^f^* 

^, IP «* ^JlsH^ #^1^ a]^* aL^tj-. «1^^* ^.^>7l 
^3r}7l <*]*]] DES, 3DES2]- ^ <^7 r *l <£Jl3r ^Jl^^o] A>^-^cf. ESP ^1 ^ 
€ IP HkMl*l ^» °J^«}J1 Tfl^ (replay attack)* ^ £ 2 # 

l^sM ° s v *r sa^°l, ESPofls ^j±(2io)7> *1#s)<H sa^. 

<13> ojs. IP o]^ 5flcl(AH)fir IP Sl^eflol^j i<?> j*Ms.:e. (ESPH1 >H ^^0]^ ^£-^1- 

^■8-^. °1 ^5f°l^ <y^^ ^^7fS«-E^ ^3 (replay attack)* » 0 M*> 

<14> ^Sfo]^ 2] cf*^ ^o] 3 ^-Tflofl ^sj^cf. 
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1020030015192 <£z\: 2003/12/5 

<15> (i) ip Bfl^o. ip sfl^o)] £#sH SU^r °^^^is(SN)l- SlJL, 

*>°H *fl#*r*l ^ I^^JL* 7>*1 IP sfl^ ^7lfVcf. O]^- o>E] Bl#5flol A^j^ 

(anti-replay service)s}al tltf. 
<ie> ( 2 ) 33-o}£ 7l^S. *H, ^7}( sender)^ ^(source address) -f- 

^ ^^L7> $^7>1- ^<y^-cf. a, ^3*>7> o>vl ^-w>^ #^J^H1^ IP ^^<?17>« 

<17> (3) ^1*1 IP *H^3 ^^Jl* 7Mi, ol ^^^V ^^-s]^ ^e}o]^ #;£-fl- 

^^l(update)^. ^bW^ ^£^-1- 7|a]s>^ ^cf. 
<18> £ 3^ <kz}o)T$ QSL*-^. 7$x\*}±- $4- ^^. 7 ] sli£o)z±. 

<19> vy<£ ^o}^ #5.^-2) 3.7)7} 32°1J1, 3271] Si IP $\^o) *5f°l^ ^ 

-fSl nfl ^^ofl 7-1 ^-slo] 01^ ^^«i^(310)^ 1, ^ iL-E-^1 t^^M $1^ ^^^^(320) 
tt 327> ^4. o]nfl 4^ ip sfl^i-g; a ^^>^, ^^H^ -£l£^-£] 371^^1 32 7fls) IP $\ 

o)u) ^A]£l^0.a^ ; ^E^-Ol^ -a£^-7> full O] ^Cf. HfE}-^, ip ^f£6\] ^ 

=M 5^ "^^JM- %^}<^ #B^ol^ #2E-°-fr 73Ai^c^o> *Vi}. 
<20> ^, 33«i^S. IP sfi^Hl X^-SM 01^ #e)-ol^ ^H-fofl 7^} 

Ol ^O.^. 7jA| S ]n^ > Cf-g-^-Ei-^ ^U}^ \p Sfl^l-g- ^A] ^D] 5+£ ZL IP Sfl^ofl 

°J^«1^7> I ^efol^ ^i-^l ^^JLJiE}- ^7} nfl^-ofl ip Jl^l 3j]7l 
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1020030015192 #^ <Qx\: 2003/12/5 

CfA] ^V^, ^*ti nfl ^ofl 7^5L|<>| ol^ <^^«i^(310)7> 1, *fl 

x\^5\o] <£&i£3L(320)7} 32 o)jL t 327^ IP sfl^^; o)u] ^a]<?H ^o]t$ 

#51-^7}- full^l ^ ^-f , ^7>7h ^^*V IP 3fl^5] ^^«iS7> lOOoleJ-Jl aj-Tg, #5} 

n Jl ^ ^*1(330H1 697>, nfl ^sa, ^^(340)^1 i 0 (H n}E^ , 

^£«1JL7> 33 «IH 68 ^1 IP ^^l-t^JE ^l^t}. ne^S, ^T-fl a>-§-£|ji 51^ 

#51-^ ^aV^ 7fl*L^ o\) tfl*|H^ yVo^ ^ 01 O.U1-, ^3*> 
JL7> *Kr ^^7>7|- €- ^^Jl* 5Hr IP IP ^H^H-fr ^^Kr ^ 

[«Vrgol °1^7> 7]#^ 34^]] 

^ °l-¥-Jl^ ^ 71^^ 3)-^^, IP 4^1^- S-^^ZL, 7M 

SRrHl 

IP 5fl^^ £b ^l7l<^«-l- ^^C-Il A>-g-£j^ ^ej-o] ^ ^£-f7V full ^]7>* ^-^^ 

^ (b) #71 ^Ol^ €£^-7> fuliol Sl S3 -8: #71 ^^-oofl T^j-ig 

^^^^1 #71 #S^ol^ ^JE^ 3-71 3M; C]*H #7l ^el-ol^ ^£-foll ^^Jl 

#71^1 34^1- ol= 7I ^<H1 sit!: ^Hl^^^r, (a) 

IP =fl^ ^ SE^r ^l7H^-» A>-g-Sl^ #£^-ol^ ^£^ 7 > full ^17>1- ##<5} 
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1020030015192 ^^ <|3*}: 2003/12/5 

#31; ^ (b) #7l ^5}o|^ #51-f7}- full°l 515^-8: m, #7l #efol^ #5L^ofl *i#^ 
g^-M ^4 #^r#^ c]*H #7l *4°]^ ^JSL-fofl 4#£ Qj^SlS:* ^^Hr # 

#44 4^1$ o] =7l a. ^ofl 4^ ^e}o]^ # £ o. ^4^^ (a ) ^e}-ol 

^ €51^-4 3.7] ^ ^"IJL^JiL-i- ^3*Hr #31; (b) IP ^4I«H, #4 IP afl^H] 

£^-44 XI ^ -a^it tlfe #31; (c) #4 ^^^7> #4 ^^Jl ^4^4 

&44S ##*Kr #31; (d) #4 ^#^4, #«a, #4 IP 43J4 ^^^^7]- #4 

^^ttiJl «34^4 ^o}Tg IP ^-g. 4# 711 TCP 31#<H1 ZL^4 

&°_# IP B)14*Kr #31; (e) #4 ^4°1^ #SL4-7> full <?l7}-& ^#*Rr 

#31; 3? (f) #71 ^#tJ4, #4 #44^ #5L^-7> full o}^ a o v 7] ^ej-o]^ ^ie.^-* 75 a] 
#311- i^-W. 

#71 si 4-7111- ol^7l 4*}4 £ a^ofl 4^ ^4°1^ €5L-f ^#4tt, IP Sfl^ 
IP sfl^i 31C-H 5a^f ^^Sis(SN)» gjfe <^^«is ^iL ^-#^f; ^44^ 

€5L^ 4#*Hr *H£.4; * #7} <UQ*is. ^iL =-t-M4 ^^«is4 #71 ^1 

S.EH 4#^ ^44^ -Q5L4-4 ^^aiJll- ti]JI7§l-^ 91 ^^j-^ 
^^°1^ €51-f4 "34^14 ^ol^ ( a o v 7] ^Al^V IP cfo. ^o^ofl 

ul, n^4 ^o.# ^7l*H, #71 ^4°1^ #5L-f7> full #7>« ;&#44 full o] ^-f oQ^ 
^44*3 #£4-* ^Al^Hr 

#71*1 4 Till- o)=7l 44"4 t^H^, #71 ^^ofl^ ^^A]7l7l ^1 

44, ^5}°] ^<H1 4^- 44^R> °^^ioiit ^^4. 
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<29> 3 4^ ^<*JM^ #^ol^ #3-?-i- ?84I*Hr ^*}7] 

<30> £ 4# , ^-£^7} full °1 ^o)^ #3-9-1- 73A]^> 

^ ^7}7] « 0 V^# A^rg^cf. 

<31> aa^l^a ^^3^, #3^-7> fullol ufl, 33 33(static) ^5+^1^ 

#3-9~I- 7,§Al*Vcf. -i-ol, £ 45 f TJ-o] ^-o^ #332] 5f^-7jhol 1(410), -9-^3M 

32(420) oloi, ^5]-ol^ #3-9-7> fulio] £ ^-M, QSl-S-S) 37]^f ^^AS 9J 

S^lt ^7>A)^rf. ^, uf^-ofl ^aIe)^ ip sfl^ <a^JL°)l ^Tfl^oi ^eH*3 #33-2| 
37l<y 32^-g- ^7>Al^cf. nj-e^ , ^&M^ i^O-O] ^flvg. 33(430)33, -9-#&£r 
64(440)3 #efol^ #3-9-1- 73^1^. 
<32> -B]^ Wj-^^, ^E|-o|^ <|}^3» ^7}*M H ^ 371 7> 

°>\d, 371 £ 33o.£ 71^ ti 0 >^ol olcf. <^1# 1-^, ^el-ol^ #3^-2} 371 7> 

320^1, #33-^ io]ji f -f^^oi 3201^ ^e}-o]^ #3-9-7} full°l 5] 

<H ^^l^ 7^X1^- nfl, oJSlfil 371^3- #3-fofl 7-1 XV Hi 7^A} 

33-m 33 ^^Sl^L, ^ -f^T^g. 33+m o_ s ^^^rf. 
<33> 3 53 ^21 ^efol^ #3-9-21 33 7370^0) #3^x>3olH-. 

<34> ^El-olxg #3-9-« ^7lSj-^ul-(S510). ^7l^Hl ^ #33-2| 7># ^Hf^ 03 

3., 7RV -f^^ ^el-ol^ € 3-9-2} 37I - is. >i 3*1-3, #3^-2} 37I » n^lef 

3 ^ttt}. A o v #tl- H o v ^# >M--§-*>Tr ^-Mte- ^eM^ #3-9-2} #7>Al 
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<35> IP ifl^-§- ^Al*M ^Q^S-'Sr Sl^T}(S520). ^^«iJl7> #5}o]^ ^£^^1 *] # 

*M 9lxt <Q&#SL ^: < ?1^» ^tl-cf (S530) . <£^, IP sfl^ H^wiJry} 

€£-f°fl ^^<H- ^^J: USH^I ^o]^ ip 3))^ TCP 

^-S- n^^-S. ^^>J1(S540), ZL^x] ^ro.^ ^A}tb IP sH^i-i; 7l ^tKS550) . cf-a-^S. 
€£-f7> full °]7>-t- ^^(S560) ( full °1^ ^iE-^-l- ?7}7] 

«o v ^* -id^i*H 7gAie>ji(S570) ( zi^l 8>o^ cf-g- IP sfl^ ^*\?>}o) 
^Jl* «Hl«Hr #313. ^eW'S 7^ a] jsiofl ip nfl^l o] 711^ ^£l^ 

7>» ^*H(S580) ; 711^ ^^1S1# ^igttlJr-i. oli=. #7ll(S520)S 5l#0> 7 >Ai Aj-^ 

7 S ^1^711 ^11- tq-A] ^Sj-Jl, IP ^O] dolA o V ^Al£l^ gO.^ f^.^. 
^^JL^r AHM- ESP ^^nV A>^-£]^ ^JO] O^g}, a.o>6|| ^5l7M ^JlBl^lA-l A> 

<36> 5L 6-£r #^21 ^BM^ ^£4" ^AJ^SI 1-^olcl-. 

<37> ^-rgs] #el-ol^ ^£0. 7|A]^1^ <^«}Jr ^"#^(610), #&M^ # t£JjL 

(620) ^ «liS -^-(630)1- itM. 
<38> <a^jfc ^Ji =-#Jf( 6 10)^r IP 3fl^># ^41 *M ip s|| -a ^Idoll J£^-£)ol ol^ 

3l(SN)S #H}ol^ ^51-^(620)^ nflS^^Mj , ^A1*V ip sfl^a. ^E^^>7l 

<39> t)lJiLJf(630)^ ^JSL ^-#-¥-(610) oi^. <a^^J:(SN)^ ^&M^ ^}JE^ 

(620 HI a-HV=1 °^^ilt wIjSSH, H-£r <y?i«]JL(SN)7l- ^o)rg ^ £ o. (620)oll <^ 

^Jl^ ^ol^ ; ^-A]*V IP sfl^-§. Cf-g- UilH^H 7ll#O.S. *L**KlL, ZL^Al go 

^ sfl7i*v^-. ^ji, n7^( 6 3o)^ #5i-oi^ ^£^ 7 > fun <y7># ##*h full <y 
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^ 7 J A JW. ^5}°1^ ^^Rr ^ £ 5» #2:S><3 ^rg^j. ti |. 

°+ S7l^ ^^o.S ^Ai^- oi ji, m^^j. a7l^ ^a}^- ^ 

<40> ^tg^g. SE*1 ^ t3^--E)7} £j^gr <r aJ^ 3=3.^ ^ 

91^ ^)°}Z]7} *| #5] ^ S.^ 71^^11; 5£^-?V4. ^^Ei7> ^-g- ^ ^ 71^-nfl^ 

^ <*]3.$r ROM, RAM, CD-ROM, 7>7l Eflo]a, #S3i)t^3, # tlM^ ^o] , 

^^7} %]^r ^ 7]^-Dpfl^ VilB^aS. Al^Eflo|l -g-AVsJo^ «-AVaVAl 0_ 

s 

€#tlr s-^^^-^^oH q-El-q- 5a^.H, =lQ ^-f-tb ^ Ml^l 2.-E- a>°1 

3£r sfl^'H 6 ) ^ 
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3J*ti, ^°}^ #5L^7\ full^l € ^-f °fl , cf^-ofl IP 3fl ^ ^^Ul^I ^ 

31 , 37|^f nisi 73^1^-0.5.^ f iLcf o>^i^>7ll IP sfl^!* 
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1] 

(a) ^€ IP ^ JEfe. 511 7H«# ##SHr3l A>-§-£|^ ^B}o]^ ^£^-7> 

full °J7]-1- ##<5Rr #31; ^ 

(b) #7l ^eH^ full^l 3 £-8: nfl, #7l #e}o]^ ^no^, 

2] 

(a) IP 2fl^^ ^7H«-l- ^#<5}-^l Aj-^-S)^ #Sfo]^ ^£-f7> 

full ^71-1- ^#^ #711; ^ 

(b) -8-71 ^o]^ #51-^7} fullol Sl^-g- nil, #71 #e}ol^ ^JE-fofl 

M ^^1 #^#^* #71 ^e}oi^ ^£^-^1 ^^HlJil- ^^Kr #7fl« 

3] 

(a) *£H^ 371 ^ ^^^l^^iLl- il^Rr #31; 

(b) IP sfl^ ^]*H, #7} IP sfl^ofl ^^s]^ oi^ gl^r #7fl; 

(c) #71 ^5i<£Jl7} #71 H^wis ^#*}^r #711; 

(d) #7l ^r#^2l- ( #<H, #7l IP sfl^ <^^wl^7> #7l ^^*V <^«IJ: ^ 
^3 ^°1# IP ^fl^l- cf^- ^}S.$)3. ^-o.^. ^^>zl ( ZL^^l 8>o_# IP 
^1^1* ^l^Rr #711; 
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(e) ^7) ^eH<3 €£-^7> full «?17>1- %^}^ ^1; ^ 

(f) ^rM^, #5^1^ -g £ o.7> full Ojig a o V 7 ) 7gAls:> 

[^^J- 4] 

a 0 v 7 ] ^efoi^ #je-^s] 7 >^- ^^ife Oils, 7HV ^o\] ^ 

5] 

*H*cHl 5^*1, #7] (f) #31^ 

#71 ^SH^ ^£-9-7> full<>l H)^^- nfl, A C V 7 ] ^oj^ #5: O-ofl ^^J:^ 

6] 

^3%H1 5^1, ^7} (a) ^7^1^ 

15. #71 ^2|o]^ ^£-9-^ H7l» n^-S ^^*>JX ( #7] ^ej-o]xg ^ £ 

-f^ ^7\X\7]JL7\ f>\±± 3711- m o.3. -i^Rr 3* *}^r ^ 
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7] 

*\}6*M 9X*\*\. #7} (f) 
8] 

SiM^, ^7l ^^1*1 IP Sfl^# Sflolol^ ^^JI, Zl^^l ^tO.^ ^l7l*>H, 

A oM #eH^ -a£-?-7> full *l7>* ^r^*H full ^-^fe #2}°]^ 7|#^ 
9] 

^18%H1 91°!*], -#7] tiling 

A o V 7l ^Bfol^ #514-1- 73Al*Hr ^oj^ #£-f^ H7 ln} f |. # 7 j ^o]^ 

<5>^ ^EH^ €i o. ^#^. 
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10] 

(a) ^€ IP ^ SL±t sfM^Jf* ##^oll a>^-£)^ ^sM^ #S.-$-7\ 
full ^l7>» ##*Rr #7jl; ^ 

(b) 4 v 7l #e}o]^ fulio] sj^-g; nfl, a o v 7 ] ^5}ol^ ^^-fofl 7^=1 

jLofl ^-71 ^eM^ ^E-ffi] 3L7l^# c^H #51-^1 7-1^-51 ^ 

71 7l^f. ^^EiS. ^ 9X^ 71^- nfl ^11. 

[3^* 11] 

(a) ^-tl^ IP sfl^^ ^ JEfe 511 7H«.* ^#^31 A>-g-£|^. ^o)x$ ^ £ ^- 7 > 
full °l7>* ##*Hr #711; ^ 

(b) #7l ^e>ol^ #JE-f7> fullol Sl^^- ofl, ^el-ol^ ^£-fofl o^y} 
Jl<>11 dil^S] ^#^-§- C^H Aj- 7 ] ^Sfol^ ^JE-fofl 7-1 ^ 0 V5J ^^Jr^- ^Al<5}^ #7111- 
i«-*Kr 3* ^SiLS *Rr ^^jyj-tf^- ^^e^]^ ^Al7l7l ^ *1 H^-H 

12] 

(a) ^sl-ol^ a7l ^ <a^«i^^a.l- ^^s>^ #741; 

(b) IP ^-gr ^71 IP sfl^Hl ifslo] oj- glfe #711; 

(c) ^71 «^2i«is7l- ^-71 id^V ^^Sis: ^#*Rr #711; 
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(d) #7) ^7} IP sfl^a) «J^5l7> ^-71 ^^*V ^aiJL ^ 

IP 3fl^l -g- Cf-g- LilH^la. Tfl^S. ^t^JI, ZL^^l ^Altb IP 

(e) #7l ^S.-f7> full «y7># ^1; ^ 

(f) ^r^^, #71 #eM^ ^£-f7> full olTg a o v 7 ] ^efo]^ 7341s} 

^ #31 « £^*Kr ^JLS. *}^r #B^-ol^ ^^-g- $^fEH*l 71 7l 



20-17 



10030015192 



[S. 1] 
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31 



Payload 
Length 



Reserved 



Security Parameter Index (SPI) 



Sequence Number Field (110) 



Authentication Data (variable length) 



111 2] 

0 



15 



23 



31 



32-bit Security Parameter Index (SPI) 



32-bit Sequence Number (210) 



Variable-Length Payload Data 



0-255 Byte of Padding 



Pad length 



Next 
Header 



Variable-Length Authentication Data 



[5L 3] 
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[£. 4] 



410 
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[£. 5] 
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S560 
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